cyb3rdr4gon

PSDecode

PowerShell script for deobfuscating encoded PowerShell scripts

ADPasswordHealth

A tool to evaluate the password health of Active Directory accounts.

CheatSheets

Cheat sheets for various projects.

cortana

This is a pack of Cortana scripts commonly used on our pentests.

Fnord

Pattern Extractor for Obfuscated Code

honeyport

A powershell script for creating a Windows honeyport.

HostRecon

This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, and domain information. It does not use any 'net', 'ipconfig', 'whoami', 'netstat', or other system commands to help avoid detection.

ph0neutria

ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability.

PowerForensics

PowerForensics provides an all in one platform for live disk forensic analysis

PowerMeta

PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed by PowerMeta. Some interesting things commonly found in metadata are usernames, domains, software titles, and computer names.

Testing